rego-skill

What problem does it solve?

This skill automates the creation, security review, and test-driven validation of Open Policy Agent Rego policies so teams avoid insecure authorizations and manual policy mistakes.

Core Features & Use Cases

• Policy generation: Create policies that start with explicit default deny and use modern Rego syntax.
• Security review: Apply a checklist to detect input validation gaps, privilege escalation, path traversal, regex risks, and information leakage.
• Test generation & validation: Produce comprehensive test suites covering allow, deny, and edge cases and validate policies with OPA tooling.
• Use case: Author RBAC or ABAC policies for API gateways, Kubernetes admission controllers, or internal authorization services and ship them with passing tests and auditable decisions.

Quick Start

Create a Rego policy that grants admins full access, editors read and write, and viewers read-only for resource type document.